Alireza Gharib Blog

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin Go to Source

Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes Go to Source

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation Go to Source

Ingress nginx annotation injection causes arbitrary command execution Go to Source

ingress-nginx path sanitization can be bypassed Go to Source

Insufficient input sanitization on Windows nodes leads to privilege escalation Go to Source

Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation Go to Source

Insufficient input sanitization on Windows nodes leads to privilege escalation Go to Source

Bypass of seccomp profile enforcement Go to Source

Bypassing policies imposed by the ImagePolicyWebhook and bypassing mountable secrets policy imposed by the ServiceAccount admission plugin Go to Source